Meraki

PhilipDAth · ‎Dec 3 2018

https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Active_Directory_Integration#Integrating_with_Client_VPN Traffic Flow When a user attempts to connect to Client VPN, the following process occurs: The user's device attempts to establish a VPN tunnel using L2TP over IP. The user provides their valid domain credentials. The MX, from its LAN IP, queries the Global Catalog over TCP port 3268 (encrypted using TLS) to the AD server configured in Dashboard. If the user's credentials are valid, the AD server will send its response to the MX, completing authentication. The MX offers the client an IP configuration on the Client VPN subnet, and the client can start communicating on the network.

Silas · ‎Nov 19 2018

yep, that worked thanks!

Klose · ‎Nov 16 2018

Of course, that is definitely allowed. Most switches support the third party compatibility.

DB · ‎Oct 30 2018

I know this post is from last year, I've been experiencing the same issue with recently installed MR33's. Your suggestion number 4 fixed my issue. Thanks!

WadeAlsup · ‎Oct 29 2018

My previous rep asked me that as well. I asked to go ahead and get it setup, then she started transitioning to another position. New rep gets the info, says he'll get it started...then nothing seems to happen. I'm starting to lose hope. Maybe it's a sign that Insight just isn't for me?

TimBisel · ‎Oct 10 2018

Personally I try to avoid daisy chaining at all cost. It works until the first one in the chain doesn't. If you can get a second run to the closet it would be best, even if you stack them. Im not sure how virtual stacking differs from physical but physical you could LACP the two lines and in the event one switch dies the link fails over to a single cable and one switch and you only loss half the connections.

CharlesIsWorkin · ‎Oct 4 2018

I want to know this also! I am wondering about setting QoS for VoIP phones to high priority and then leaving available bandwith on the table when other internet activities want some bandwith.

BlakeRichardson · ‎Oct 1 2018

@Shane_Martin yes licensing is something to check, this caught me out the other day also try temporarily disabling windows firewall and see if that makes any difference. One other thing have you tried downloading a fresh copy of the agent installer via your Meraki dashboard?

jared_f · ‎Sep 12 2018

Any word on this feature? It is still a top requested feature almost a year later. Are we still expected to do this via the API?

FelixWong · ‎Aug 30 2018

wow i would love to have some of that SWAG although Meraki Green socks is really a dare for me.. hahaha..

JBOS · ‎Aug 28 2018

Thanks @kbuckley I've got a support ticket open too.

GiacomoS · ‎Aug 26 2018

@PhilipDAth, giving out all our secrets so blatantly!!!! XD

Mr_IT_Guy · ‎Aug 21 2018

BlakeRichardson · ‎Aug 15 2018

@Josh3 we use three different category of tags. One for device type i.e. iPad, iPhone, Laptop Desktop. Second is if its a "Staff" device or a "shared" device. Then lastly we have department tags i.e. IT, healthandsafety, maintenance, finance.. With having this many you can specify tagging that is broad or be quite specific.

Amine · ‎Aug 15 2018

Any expert around to tell me what's wrong here ? As explained : If a user click continue he will connect to the Guest wireless, if he clicks on enroll he will be guided to our JAMF enrolling system ((The url jamf.con is for the example only) <!DOCTYPE html> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <title>$MERAKI:NETWORK_NAME$</title> <style type="text/css" media="screen"> $MERAKI:INLINE_MAIN_CSS$ </style> <meta name="viewport" content="width=device-width,initial-scale=1"> </head> <body> <div id="content"> <div id="container"> <div class="header"> <div id="icon_cell">$MERAKI:NETWORK_LOGO_IMG_TAG$</div> </div> <div id="continue"> <h1>$MERAKI:WELCOME$$MERAKI:NETWORK_NAME$</h1> <p>$MERAKI:NETWORK_MESSAGE$</p> <a class="button" href="$MERAKI:AUTH_AND_CONTINUE_URL$" title="Continue to the Internet">$MERAKI:CONTINUE_TO_THE_INTERNET$</a> </div> </div> <div id="content"> <div id="container"> <div class="header"> <div id="icon_cell">$MERAKI:NETWORK_LOGO_IMG_TAG$</div> </div> <div id="jmf"> <p>$MERAKI:NETWORK_MESSAGE$</p> <a class="button" href="$MERAKI:AUTH_URL(http://www.jamf.com)$" title="Continue to enroll"></a> </div> </div> <div class="footer"> <h3>POWERED BY</h3> $MERAKI:CISCO_MERAKI_SMALL$ </div> </div> $MERAKI:MERAKI_JS$ </div> </body> </html>

PhilipDAth · ‎Aug 14 2018

That is a typical page presented by a CDN inside of a provider that has been configured to only allow access to a providers IP address ranges - and it has been access outside of the provider. This most frequently happens when you use DNS servers that are different to the providers DNS servers. So lets say you are with ISP1, are using ISP1 DNS servers, and then change to ISP2 but don't update your DNS. ISP1 will give out the IP addresses of the CDN node in their network - but you are now not allowed to access it,

AshwiniSharma · ‎Aug 2 2018

I am facing the same issue. In past, we are using Cyberoam firewall and through that, I have applied policy's to users, not on the systems. why CISCO don't this type of feature. is there any solution for this?

Adam · ‎Jul 19 2018

@TimBisel wrote: Thanks guys I am new at company and still need to build the trust in. Was able to convince him to let me trim it down to the one needed port. It connects back to a server so I was able to do it with just one port. Nice work, you've done your security deed for the day.

WirelessGuy_ · ‎Jul 3 2018

I have completed a few installations in warehouses involving steel, etc. You will have multi-path and reflection issues. I recommend using a patch antenna and definitely performing an APoS survey to gain better understanding of how the RF will react with the antennas in the environment. Also mounting can be challenging, I've had success with using Ventev infrastructure for i-beam mounting and wall mounting along with NEMA rated enclosures to protect the access point. Cheers, -DC

Netify · ‎Jun 13 2018

That's about the lamest answer I've ever heard. Obviously someone who's never heard of RackSpace or any of a dozen or two remote lab / web conferencing systems. Or (Cisco's) own Webex for that matter. pitiful

mike318 · ‎May 18 2018

I have been told that if the account your MX product uses to authenticate to your DC has ANY special characters in it at all, that can cause WMI 100% CPU Usage on your DC. FAIL.

RafaelM · ‎May 10 2018

Nice shirt there @Jack!!! Congratulations!

WadeAlsup · ‎May 3 2018

Mine came in as well. Pleasantly surprised. Thanks Meraki!

JoeM · ‎Apr 26 2018

Oh the good ole days. Back in the 90's I was working for a capital equipment manufacturer in the semiconductor business. We were networking SUN386i computers using 10Base5(thick net). One morning I receive a frantic call from a customer in Colorado, a very big Semiconductor company. They were going crazy, the system is no longer connected to the network and they had to halt IC chip inspection. I told him the system had been running fine for months did they do anything or move the system. They said no. I asked if they checked to make sure the ethernet cable was plugged in. They said yes, with an I can't believe you even asked me that question, attitude. They demanded I get on a plan and fix the issue. Since they were a very big customer and had a few more machines on order I flew out that evening from New York to Colorado. I showed up to the site bright and early the next morning. They took me to the machine on the production floor. I verified the system wasn't connected to the network. I went right to the back of the system, noticed the network cable we half out. In those days the network cable was held in by a clip. I plugged in the network cable and everything came back up in seconds. I was there for a total of 10 minutes. I turned to the guy who ripped me a new one on the phone and said "All fixed, the network cable was unplugged". He was so embarrassed and just walked off. I worked with the network consultant for a few hours since my flight wasn't until that evening and then took a drive around Colorado.

WadeAlsup · ‎Apr 19 2018

Hi @edbarrett, Once your clients connect to your network via VPN, they will show up in your dashboard under Network-wide > Clients. You can find them very easily by the status symbol (which looks like a globe for VPN clients) or by filtering for that subnet. Once you find the client, you'll see they have the Network Policy labeled "Normal" which will be your default policy. You can select that client and change the policy to another that you have setup. Different policies can be setup under Network-wide > Group policies.

About WadeAlsup

WadeAlsup

Community Record

Badges